8cf97c7fd84e8e08c3f4b98dbca5bbd2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8cf97c7fd84e8e08c3f4b98dbca5bbd2_JaffaCakes118
Size

32KB
MD5

8cf97c7fd84e8e08c3f4b98dbca5bbd2
SHA1

d18c49b6f68315d00972160fd76e2edd7ecae4cb
SHA256

4d5e7847210274ba78e82f2cd269bb6ec1cce2132582cecbddbbbc61f38b6d8c
SHA512

aad8ecfdaf0b0cdaccfa8d6582dd8cb74c5e03bbe2e3796e61fa5c944b55ccb3739eef3e283c05b77a7db1f424295814c726886c12e6d360052f74488479e499
SSDEEP

384:nZ9AeeYLk1qK+NMEZdble+KxyzZQsLUcWYprAyMfylur8RN9CvgoJA:ncG6qnKggezZRWYdoq6cN9Cvg3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cf97c7fd84e8e08c3f4b98dbca5bbd2_JaffaCakes118

Files

8cf97c7fd84e8e08c3f4b98dbca5bbd2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bbd25d71eccefd91099134d99fde4b13

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleFileNameA
GetLastError
LocalAlloc
CreateMutexA
OpenMutexA
GetStartupInfoA

msvcrt

_XcptFilter
_exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
exit

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ